SECURITYTHE REGISTER
Angry bug hunter with Microsoft beef drops new Windows 0-day
Nightmare Eclipse, a bug hunter with a reported grudge against Microsoft, disclosed a new zero-day vulnerability called RoguePlanet targeting Microsoft Defender on Windows 10 and 11. The flaw allows local privilege escalation to SYSTEM-level access and is part of seven zero-days the researcher has publicly released, accusing Microsoft of ignoring vulnerability reports and refusing communication. Microsoft initially responded with potential legal threats but later clarified it had 'no intention to pursue action' against security researchers.
Mentioned
Related Signal
Adjacent reporting
- Mystery Microsoft bug leaker keeps the zero-days coming
- New Microsoft Defender “RedSun” zero-day PoC grants SYSTEM privileges
- Microsoft calls zero-day releases ‘never justifiable’ as researcher threatens to drop more
- Microsoft's patch for a 0-day exploited by Russian spies fell short. Another Windows flaw is under attack
- Mystery Microsoft bug leaker keeps the zero-days coming
- Disgruntled 0-day hunter 'humiliated' by Microsoft pledges 'bone shattering drop' as Redmond calls cops